If a customer needs to reset the actual encryption keys on the drive the drives must be "secure erased,” which means throwing away the ‘bulk key’ and generating a new one. The process in our system to...If a customer needs to reset the actual encryption keys on the drive the drives must be "secure erased,” which means throwing away the ‘bulk key’ and generating a new one. The process in our system to change the ‘bulk encryption key’ adds the steps of remove / add the drive so that we migrate and protect the data (otherwise it would be lost)